V8.02.512.2025.05.30

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-05-30 00:28:39 +02:00
parent 2680012395
commit b2282d3475
172 changed files with 14057 additions and 41 deletions
--- a/lib/lib_check_kernel.sh
+++ b/lib/lib_check_kernel.sh
@@ -0,0 +1,72 @@
+#!/bin/bash
+# SPDX-Version: 3.0
+# SPDX-CreationInfo: 2025-05-05; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
+# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
+# SPDX-FileCopyrightText: 2024–2025; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-FileType: SOURCE
+# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
+# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
+# SPDX-PackageName: CISS.debian.live.builder
+# SPDX-Security-Contact: security@coresecret.eu
+
+#######################################
+# Kernel Image Selector
+# Globals:
+#   HANDLER_ARCHITECTURE
+#   KERNEL_SRT
+#   KERNEL_TMP
+#   kernel
+# Arguments:
+#  None
+# Returns:
+#   42: Sorting Error.
+#######################################
+check_kernel() {
+  clear
+  declare -i counter=1
+  declare first_string=""
+  declare line=""
+  declare -gx kernel=""
+  declare name=""
+  declare options=""
+
+  if [[ ${HANDLER_ARCHITECTURE} != arm64 ]]; then
+    apt-cache search linux-image | grep linux-image | grep amd64 | grep -v "meta-package" | grep -v "dbg" | grep -v "template" >> "${KERNEL_TMP}"
+  else
+    apt-cache search linux-image | grep linux-image | grep arm64 | grep -v "meta-package" | grep -v "dbg" | grep -v "template" >> "${KERNEL_TMP}"
+  fi
+
+  sort --output="${KERNEL_SRT}" "${KERNEL_TMP}" || {
+    printf "❌ Error check_kernel() Line 40 sort failed\n" >&2
+    # shellcheck disable=SC2162
+    read -p  $'\e[92m✅ Press \'ENTER\' to exit the script ... \e[0m'
+    return 42
+  }
+
+    while IFS= read -r line; do
+      first_string=${line%% *}
+      name=${first_string#linux-image-}
+      options+=("${name}" "${counter}" off)
+      ((counter++))
+    done < "${KERNEL_SRT}"
+
+  # shellcheck disable=SC2155
+  if declare -g kernel=$(dialog \
+                          --no-collapse \
+                          --ascii-lines \
+                          --clear \
+                          --backtitle "CISS.debian.live.builder" \
+                          --title "Select the Kernel for the CISS Hardened Debian Live Image ISO" \
+                          --radiolist "Kernel available \n *+bpo*       : Debian Backported Kernel \n *cloud*      : Special lightweight images for KVM \n *unsigned*   : Unsigned Kernel \n *preempt_rt* : Special Kernel for real-time-computing \n Not unsigned marked are MS signed Kernel for Secure Boot \n" 0 0 "${options[@]}" 3>&1 1>&2 2>&3 3>&-); then
+    clear
+  else
+    clear
+    if [[ "${HANDLER_ARCHITECTURE}" == "amd64" ]]; then
+      declare -gr kernel="amd64"
+    elif [[ "${HANDLER_ARCHITECTURE}" == "arm64" ]]; then
+      declare -gr kernel="arm64"
+    fi
+  fi
+}
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh